PT-2024-9118 · Hewlett Packard · Hpe Autopass License Server

Published 2024-11-25 · Updated 2025-07-14 · CVE-2024-51768

Positive Technologies (AI Summary)

CVSS v3.1

8.0

High

Base vector

AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Hewlett Packard Enterprise AutoPass License Server versions prior to 9.17

Description An hsqldb-related remote code execution vulnerability exists in HPE AutoPass License Server (APLS). The vulnerability is due to insufficient input validation. Exploitation may allow a remote attacker to execute arbitrary code.

Recommendations Update Hewlett Packard Enterprise AutoPass License Server to version 9.17 or later.

Fix

RCE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

BDU:2024-10804

CVE-2024-51768

ZDI-24-1632

Affected Products

Hpe Autopass License Server

References · 14

• https://osv.dev/vulnerability/CVE-2024-51768 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-24-1632 · Security Note
• https://bdu.fstec.ru/vul/2024-10804 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-51768 · Security Note
• https://t.me/cvetracker/27764 · Telegram Post
• https://twitter.com/TheZDIBugs/status/1864053755206910407 · Twitter Post
• https://t.me/cvenotify/128825 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1944744422685450511 · Twitter Post
• http://zerodayinitiative.com/advisories/ZDI-24-1633 · Note
• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbgn04760en_us&docLocale=en_US · Note
• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbgn04760en_us&docLocale=en_US · Note
• https://twitter.com/SystemTek_UK/status/1864046477389029562 · Twitter Post
• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbgn04760en_us · Note
• https://twitter.com/CVEnew/status/1944710708639277235 · Twitter Post